Don't disable sessions automatically if static_filter is enabled ... Some people may want to use session_authenticate_filter for serving static content so they need sessions in that case ... Note that in the most common case (ie: not needing sessions for serving static content), the session data won't be loaded/saved due to the new lazy session data handling (see [940]), so there won't be any speed penalty